AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Researchers at Glow discovered that AI coding agents have inadvertently exposed over 13,000 internal company images on public GitHub repositories. These images were shared by developers at more than 300 organizations as part of a review process for code changes. The exposed images include sensitive information such as customer billing records and unreleased features. In most cases, the images were found under the personal accounts of developers. The incident highlights a potential security risk associated with the use of AI coding agents. The exposed images were made publicly accessible due to the agents' automated sharing of screenshots.